Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
File:                     YsX8533eTi7k_WU1EAUpwvRE15o.mft (raw, json)
Hash identifier:          uy7vwx3lq6ijOePs9bPq3v+/6ZVheU3e+ZTNhD25+DU=
Subject key identifier:   97:74:DE:20:89:60:BA:3F:19:F1:DE:0E:A4:A5:FB:32:3B:0B:B1:91
Authority key identifier: 62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A
Certificate issuer:       /CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
Certificate serial:       01A1D9B84014BB8D1F1C0BFABEE25CE66AB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
Manifest number:          1AF9
Signing time:             Sat 14 Nov 2026 11:01:33 +0000
Manifest this update:     Sat 14 Nov 2026 11:01:33 +0000
Manifest next update:     Sun 15 Nov 2026 11:01:33 +0000
Files and hashes:         1: 6Um4YcPLKEMW_YgtY-tOshghoyY.asa (hash: ivcifzFdZ/K6g/+IUKtqw+OmsRnX93/lKvwZVU/Cykg=)
                          2: GYvctFRB0vL8CZ5WGPseD7TX41k.asa (hash: FEPj7H6wY/hkKzVpHOSMzB1AZDSrZKxs+Mx7brcM7YM=)
                          3: M-O71STwS8Kp5niFGIFQhYvdlWo.roa (hash: yLzi9tjJQyrnPyV+LD1bidPc5F2jwLqmN1OObhiODg4=)
                          4: Xco1tcKWr3OJsK2GRTGEy3uXjCI.roa (hash: MmiJmWSzx/Ap053j4ROh2ZTks4oLbkSzRhXee+eiqmg=)
                          5: YsX8533eTi7k_WU1EAUpwvRE15o.crl (hash: y4kiNpOcDbMtvVvpkQEyYeE/5+op9mDYkBFf8j2Ot1E=)
                          6: kVbtdxl5r7rl44HYKA5sht2hTPA.roa (hash: pDR06QMON/0Rz4oTXhPHJgXDsLVRiWPUPc+NTcHziwk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 10:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:d9:b8:40:14:bb:8d:1f:1c:0b:fa:be:e2:5c:e6:6a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62c5fce77dde4e2ee4fd6535100529c2f444d79a
        Validity
            Not Before: Nov 14 11:01:33 2026 GMT
            Not After : Nov 15 11:01:33 2026 GMT
        Subject: CN=9774de208960ba3f19f1de0ea4a5fb323b0bb191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f2:c0:50:a4:ec:5f:f1:08:dd:b2:62:b3:bb:
                    71:af:fa:e4:d7:3f:a9:ab:9e:81:a0:67:6d:b1:9e:
                    9a:ea:e1:80:75:b5:b8:d2:17:c1:12:8b:04:63:97:
                    5a:8e:62:d2:52:02:33:34:d8:b6:50:7d:bf:7c:77:
                    82:c9:18:1a:0e:a6:cd:b7:6a:16:1f:dd:04:18:2e:
                    27:a9:cf:26:6b:7e:65:21:54:07:8c:a3:70:d8:bd:
                    c0:58:64:1e:1c:84:1a:92:74:a0:af:9a:1b:35:59:
                    39:12:86:b8:ee:46:3a:39:2c:a4:ab:36:4f:85:83:
                    85:dc:6b:9a:7e:9f:d0:b7:92:e7:50:89:e3:1f:a9:
                    d2:cf:9c:60:1e:ac:e7:cd:22:71:50:e2:76:6c:64:
                    8e:51:09:78:83:cc:43:27:45:23:bd:2f:a9:d3:d5:
                    cb:7e:f3:8d:8f:fa:42:bf:a3:9b:f9:e1:5e:91:52:
                    a4:41:76:ad:61:f9:6e:95:f5:df:16:c6:6a:51:87:
                    f1:82:2b:e0:d6:22:5b:1e:e3:56:40:e2:da:ea:35:
                    c5:47:cc:85:56:13:d8:bb:e2:67:e6:77:43:1d:d0:
                    26:c1:6f:a4:6b:57:cc:c3:0a:f8:be:ba:6c:87:88:
                    66:fa:78:0d:51:7b:92:43:4d:e7:98:a2:e0:2c:2b:
                    8f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:74:DE:20:89:60:BA:3F:19:F1:DE:0E:A4:A5:FB:32:3B:0B:B1:91
            X509v3 Authority Key Identifier:
                keyid:62:C5:FC:E7:7D:DE:4E:2E:E4:FD:65:35:10:05:29:C2:F4:44:D7:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsX8533eTi7k_WU1EAUpwvRE15o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/003f70-0a88-4fab-b374-af6be905799d/1/YsX8533eTi7k_WU1EAUpwvRE15o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:46:d3:ca:f3:a2:70:57:f3:fc:17:53:ba:f6:72:88:9e:5d:
         9a:da:33:e6:1f:e8:55:c5:b3:e5:76:5e:fd:b2:d9:17:b4:6b:
         51:00:c9:c0:b1:a7:c2:7a:41:c4:58:b1:02:b7:47:99:4f:b3:
         e9:34:46:cc:c7:32:15:ea:5b:32:01:53:75:b1:78:0f:ce:7e:
         9e:95:c9:85:66:95:30:8a:95:1c:be:a2:db:f4:25:a7:4d:39:
         b9:c7:b9:c6:3d:8f:ca:12:7c:a7:bc:70:c7:ed:5c:7f:e1:77:
         c4:ca:aa:46:ed:e5:f9:fa:03:89:ff:ec:94:0d:af:bc:5c:29:
         86:5f:7f:c9:25:a8:24:74:f2:57:39:72:df:c3:32:0a:5a:41:
         a6:4e:20:25:0c:89:fe:64:ff:d0:27:6c:16:e8:fb:67:c3:01:
         01:4f:e3:ea:4c:a1:2c:70:f8:05:e2:24:c1:b9:1c:75:60:ba:
         86:3f:8a:02:b2:15:65:ae:7b:13:5b:ae:9a:1e:7e:7a:ad:7d:
         ff:64:29:3a:31:60:d2:6a:1a:f6:b6:c2:9e:f9:c3:b0:27:fb:
         13:47:7b:a7:2b:74:c5:d9:ba:75:9e:44:5e:98:61:16:4d:00:
         cf:1d:15:ac:bf:d2:45:51:a3:f0:91:a3:f0:41:91:44:92:dc:
         15:0b:f4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:55:00 2026 by rpki-client